Skip to content
OpenAdvisories
Unscored CVE-2018-1000084 EUVD-2018-1826GHSA-7cch-m59v-c3cp

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can resu…

Published Mar 13, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the Javascript code into Layout Name .

References